BGP – Private VRF

Private VRF is represented by two Core ASNs 65101 (DC01) and 65111(DC11) and has peering with AWS ASN 65121 out of each datacentre.

To allow for Inter-VRF routing (Public/Private) all switches have BGP peering with the firewall cluster. MED is used to route all traffic via switches 01/11 and failover to 02/12 when required.